statezero 0.1.0b64__tar.gz → 0.1.0b66__tar.gz

{statezero-0.1.0b64 → statezero-0.1.0b66}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: statezero
-Version: 0.1.0b64
+Version: 0.1.0b66
 Summary: Connect your Python backend to a modern JavaScript SPA frontend with 90% less complexity.
 Author-email: Robert <robert.herring@statezero.dev>
 Project-URL: homepage, https://www.statezero.dev

{statezero-0.1.0b64 → statezero-0.1.0b66}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "statezero"
-version = "0.1.0b64"
+version = "0.1.0b66"
 description = "Connect your Python backend to a modern JavaScript SPA frontend with 90% less complexity."
 readme = "README.md"
 license = { file = "LICENSE" }

{statezero-0.1.0b64 → statezero-0.1.0b66}/statezero/adaptors/django/urls.py

@@ -1,12 +1,13 @@
 from django.urls import path
 
-from .views import EventsAuthView, ModelListView, ModelView, SchemaView, FileUploadView, FastUploadView, ActionSchemaView, ActionView, ValidateView, FieldPermissionsView
+from .views import EventsAuthView, ModelListView, MeView, ModelView, SchemaView, FileUploadView, FastUploadView, ActionSchemaView, ActionView, ValidateView, FieldPermissionsView
 
 app_name = "statezero"
 
 urlpatterns = [
     path("events/auth/", EventsAuthView.as_view(), name="events_auth"),
     path("models/", ModelListView.as_view(), name="model_list"),
+    path("me/", MeView.as_view(), name="me"),
     path("files/upload/", FileUploadView.as_view(), name="file_upload"),
     path("files/fast-upload/", FastUploadView.as_view(), name="fast_file_upload"),
     path("actions/<str:action_name>/", ActionView.as_view(), name="action"),

{statezero-0.1.0b64 → statezero-0.1.0b66}/statezero/adaptors/django/views.py

@@ -23,6 +23,7 @@ from statezero.adaptors.django.exception_handler import \
 from statezero.adaptors.django.permissions import ORMBridgeViewAccessGate
 from statezero.adaptors.django.actions import DjangoActionSchemaGenerator
 from statezero.adaptors.django.action_serializers import get_or_build_action_serializer
+from statezero.adaptors.django.serializers import DRFDynamicSerializer
 from statezero.core.interfaces import AbstractEventEmitter, AbstractActionPermission
 from statezero.core.process_request import RequestProcessor
 from statezero.core.actions import action_registry
@@ -44,6 +45,18 @@ class EventsAuthView(APIView):
     permission_classes = [permission_class]
     
     def post(self, request, *args, **kwargs):
+        sync_token = getattr(settings, "STATEZERO_SYNC_TOKEN", None)
+        client_token = request.headers.get("X-StateZero-Sync-Token")
+        if client_token is not None:
+            if not sync_token or client_token != sync_token:
+                return Response(
+                    {
+                        "error": "Sync token mismatch for events auth.",
+                        "header": "X-StateZero-Sync-Token",
+                    },
+                    status=status.HTTP_409_CONFLICT,
+                )
+
         channel_name = request.data.get("channel_name")
         socket_id = request.data.get("socket_id")
 
@@ -77,6 +90,14 @@ class EventsAuthView(APIView):
 
         # Delegate authentication to the event emitter.
         response = event_emitter.authenticate(request)
+        if client_token is not None:
+            if isinstance(response, dict):
+                response["statezero_sync_token_match"] = True
+            else:
+                response = {
+                    "auth": response,
+                    "statezero_sync_token_match": True,
+                }
         logger.debug(f"Authentication successful for channel: {channel_name}")
         return Response(response, status=status.HTTP_200_OK)
 
@@ -94,6 +115,64 @@ class ModelListView(APIView):
             model_names.append(model_name)
         return Response(model_names, status=status.HTTP_200_OK)
 
+class MeView(APIView):
+    """
+    Returns the current authenticated user as a guaranteed model summary.
+    Uses the existing StateZero serializer with only the PK field requested,
+    which includes `pk` and `repr` by design.
+    """
+
+    permission_classes = []
+
+    def get(self, request, *args, **kwargs):
+        try:
+            user = config.orm_provider.get_user(request)
+            if not user or not getattr(user, "is_authenticated", False):
+                raise PermissionDenied(detail="Authentication required.")
+
+            model = user.__class__
+            model_name = config.orm_provider.get_model_name(model)
+            pk_field = model._meta.pk.name
+            pk_value = getattr(user, pk_field)
+
+            fields_map = {
+                model_name: {pk_field},
+            }
+
+            serializer = DRFDynamicSerializer()
+            serialized = serializer.serialize(
+                data=user,
+                model=model,
+                depth=0,
+                fields_map=fields_map,
+                many=False,
+                request=request,
+            )
+
+            included = serialized.get("included", {})
+            user_bucket = included.get(model_name, {})
+            user_data = user_bucket.get(pk_value)
+
+            # Defensive fallback to keep the endpoint contract stable.
+            if user_data is None:
+                user_data = {
+                    pk_field: pk_value,
+                    "repr": {
+                        "str": str(user),
+                        "img": user.__img__() if hasattr(user, "__img__") else None,
+                    },
+                }
+
+            return Response(
+                {
+                    "model_name": model_name,
+                    "data": user_data,
+                },
+                status=status.HTTP_200_OK,
+            )
+        except Exception as original_exception:
+            return explicit_exception_handler(original_exception)
+
 
 class ModelView(APIView):
 

{statezero-0.1.0b64 → statezero-0.1.0b66}/statezero.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: statezero
-Version: 0.1.0b64
+Version: 0.1.0b66
 Summary: Connect your Python backend to a modern JavaScript SPA frontend with 90% less complexity.
 Author-email: Robert <robert.herring@statezero.dev>
 Project-URL: homepage, https://www.statezero.dev